bgabler

I sincerely apologize for the inconvenience this caused you.

Is there an email address I can reach you at? I can apply these changes for you so we can get your install up and running properly.

Hi,

I apologize for the delay.

This has been tracked down to extra security hardening we’re doing as
recommended by Sucuri. This issue affects multisite-enabled installs
that have two or more sites (the ‘main’ site isn’t affected). It looks
like this issue has been present for new installs only since the 3.8
release. Any installs made on previous versions aren’t affected
(whether or not they’ve updated to 3.8).

We’ve updated our WP package to include the fixed
wp-includes/.htaccess for all new installs and all future upgrades.
Any upgrades to 3.8 or 3.8.1 in the future will get the fix. The
updated WP package is live at this time so the next automatic or
forced Installatron Update will instate it.

To fix an affected install right now, simply append these lines to
wp-includes/.htaccess

<Files ms-files.php>
allow from all
</Files>

Alternatively, the whole .htaccess file at wp-includes/.htaccess could
be deleted as it’s only there to handle Sucuri’s hardening
recommendations.

Eric,

You’re very welcome.

The .htaccess file in the wp-includes folder does contain

<Files *.php>
deny from all
</Files>
<Files wp-tinymce.php>
allow from all
</Files>

We have already heard back from Installatron and they are currently working on a fix which has been promised to us by end of day. As soon as it’s available we’ll make sure we update all of our servers right away.

As for existing installs I’m not too sure as I believe the wordpress version itself will be the same so an auto-update will not occur. However, we will get the details on the fix and pass them along so existing customers that need Multi-site can be fixed.

Thanks!

—
Ben Gabler
Senior Product Manager, Hosting @ Go Daddy

Hi,

I apologize for the inconvenience. We are currently working with Installatron (our auto installer) to get this fixed.

They are usually pretty quick so I would expect this to be fixed within the next few hours and pushed out within the next 24 hours.

In the mean time if you need any assistance manually installing multi-site please do not hesitate to ask and I’ll make sure we get it taken care of.

Thank you for your patience and understanding.

—
Ben Gabler
Senior Product Manager, Hosting @ Go Daddy